ThinKiosk 4.0 preview and feature teaser:


Everyone having a Good Citrix Synergy week? Some great new products announced! Ready for more announcements?


After 5 months of coffee, tears of frustration and hair pulling we’re absolutely delighted, thrilled and relieved to announce ThinKiosk 4.0 is nearly ready. Complete with my new partner in crime Remko Weijnen (I’ve been saying ‘we’ for ages, now you know who… awesome eh?) we’ve worked some long nights to get this version out the door.

With that out of the way, we’re proud to announce some of the new features coming in 4.0. Bear in mind this is just a preview, the final features and details of the product are still being hammered out, but below is a taster of some of the functionality you can expect to see shortly.


Back to the drawing board:

ThinKiosk 4.0 is a complete rewrite and refactor of ThinKiosk. It’s built on the 4.0 .Net framework which has brought a lot of simplicity and new features to our tool-set. ThinKiosk 4.0 was built with three main aims:

  • Enterprise Ready.
  • Fool Proof.
  • Secure by Design.

With ThinKiosk 4.0, your setup time will go from days to minutes. Out of the box, ThinKiosk is ready for the following technologies without any local machine tuning:

  • Citrix XenDesktop / XenApp.
  • Citrix VDI in a Box.
  • VMware View.
  • Microsoft Remote Desktop Services.

For the exact details of each of these optimizations, follow the subsequent blog posts / documentation.


New Look and Feel:

Without further ado, lets start with the new look and feel:


ThinKiosk 4.0 has also been built on the industry leading graphical interface DevExpress giving us a really shiny, professional and sleek interface. Finally giving us an Interface we can be proud to put on your desktops.

ThinKiosk’s interface has been further improved giving you an Applications tab for Publishing desktops for VMware View, Microsoft Remote Desktop services or Citrix Desktops via ICA file or local applications.


This Applications tab has been modelled after the windows 8 Metro err, I mean Windows 8 UI. This provides a similar look and feel to the new Windows start menu and it really breathes new life into old hardware. With this tab, you can publish shortcuts to VDI Desktops or local applications making it a one stop shop for applications.

You can flick from one tab to another easily, or disable the one you do not wish to use.


It’s all about the customization!

Beauty is in the eye of the beholder right? Agreed!


 ThinKiosk 4.0 will ship with over 8 themes and wallpapers, customization of the splash screen, buttons… everything!

foggy black office 2010 black Office 2010 Blue Office 2007 Pink office 2007 Green

The Applications tab can also be completely customized to your tastes:




Lock down:

As with Previous versions of ThinKiosk, every button and object in ThinKiosk can be locked down to exactly what you wish, for example here’s a stripped back browser session:

lockdown browser


Or a stripped back application window:



Anyway… Enough about the appearance, Lets talk tech!


Introducing the new ThinKiosk Broker Service and Management console:


The ThinKiosk Broker, Management Console and ThinKiosk clients use an all new ThinKiosk TCP protocol (I never ever, ever want to see a tcp socket again for as long as I live, writing this protocol was a killer!) to allow you to centrally manage, catalog and report on your ThinKiosk devices. The protocol is lightening fast and secure by design.

This new framework will form a long blog post itself, but some quick fire information is below:

  • Complete off domain management.
  • Auto device registration, just point ThinKiosk at the broker and it will check in and download the default profile.
  • Remote Control / Shadowing of end point devices via the console.
  • Device Grouping for profiling multiple devices or creating an organisation structure.
  • Remote actions (power off, restart, update).
  • Device Reporting.
  • No Enterprise database software necessary.
  • Audit logging.

Unlike other Thin Client protocols and software, ThinKiosk does not accept any inbound connections, in user or system context. Removing the ability to hijack thin clients… which is all too possible with certain vendors!

The console is simple, and quick to navigate:


Installation of the broker takes roughly 5 minutes and is ready to serve your Devices as soon as you configure the default profile.


New Profile Handler:

The ThinKiosk client has received an overhaul and with it we’ve streamlined the profile. ThinKiosk no longer requires group policies or the clunky offline config tool, we have a new profile system based on XML files with a fitting profile editor to match:

profile editor

No more configuring 5 group policies for one url, the new policy manager is clean, self explanatory, full of new functionality and uses the same interface whether you are using the ThinKiosk management console or modifying the local profile.

If you want to still use group policy to deploy configuration? No problem! just drop the file on the client via group policy preferences!


And the Client!

Lets talk about the 4.0 client.


Supported platforms:

Windows XP – Windows 8


Browser Ahoy!


ThinKiosk is now a fully fledged browser, complete with address bar. If you want to allow your users to browse around, now you can.


Browser improvements:

The ThinKiosk 4.0 browser will:

  • Supress scripting errors.
  • Allow you to add your sites to the trusted sites via policy.
  • Auto tunes the browser for VDI portals.
  • Auto circumvent silly SSL untrusted or mismatched errors (great for POC’s *cough* VDI in a Box *cough*)
  • ThinKiosk now runs as an Internet explorer executable. No more flicking between iexplore.exe and thinkiosk.exe.


VDI Improvements:

Now to the nuts and bolts!


Local login pass through:

Now that you have the ability to add direct VDI connections. ThinKiosk will handle the log in experience and pass the credentials to the responsible technology:


This integration allows ThinKiosk to better manage the desktop experience and provide your users with a single login pane rather than the recurrent login screens you can experience with Microsoft / Citrix file connections.

These connection files can also be auto launched, to remove that pesky click first thing each day.


Citrix Technologies:

  • Log off screen redirection for Web interface, storefront and VDI in a box.
  • Log off the web portal when a desktop launches for the above platforms.
  • Support for Adding ICA file connections.
  • Auto configuration of Single sign on from local pc to remote desktop. (Nightmare previously).
  • VDI in a Box auto browser tuning for compatibility.
  • Optionally disable the Citrix Desktop viewer (CDviewer.exe).


VMware View:

  • Support for publishing multiple pool connections
  • Support for publishing multiple direct desktop connections.
  • Support for PassThrough.
  • Disables Certificate checking by default for quick POC’s.
  • Pass through ctrl alt del / Windows + l (more on this later).


Microsoft Remote Desktop Services:

  • Support for publishing multiple connections.
  • Support for 2012 RDS and VDI.
  • SSL Certificate warning suppression.
  • Support for login once.


Improved local application handling:

ThinKiosk 4.0 has an improved local application engine, When you add an application to the Applications tab, it will automatically pull in the icon window and you can also specify to launch apps but hide them (think run key entries). If ThinKiosk is restarted via admin task, it’s smart enough to know not to relaunch them.

Environment variables for paths and arguments are fully supported and i’ve also added a variable for 32bit program files paths… I always wondered why Microsoft didn’t do this, but I digress.


Windows secure keystroke blocking and passthrough:

You asked… (and asked and asked and asked and asked). It’s done, with ThinKiosk 4.0 you will be able to block CTRL + Alt + Del, [Windows] + [L] etc.

Pass through of these keystrokes to the remote desktop is available for VMware View already and will be coming shortly after 4.0 for Citrix and Microsoft connections.

machine lockdown


Group Policy Lockdown:

By default when you install ThinKiosk 4.0, it will arm the PC with the most restrictive policies via the local group policy engine, disabling access to all admin utilities and even local disks. This lockdown can be tuned or turned off via policy if required.

ThinKiosk performs privileged actions via the ThinKiosk Machine service which installs as part of the installation.


Auto log in account:shell

ThinKiosk will ship with it’s own user account for fast deployment. This account will be created on the local machine and gives you a quick an easy method to manage local accounts on non domain joined PC.

The accounts password is synchronized with the ThinKiosk unlock password you specify.

This account is completely optional and you can turn it off or substitute it with a domain account of your choice.

ThinKiosk will also manage the Windows Shell replacement policy itself via policy, so no more mucking around with local group policy or registry keys.

ThinKiosk also now encrypts the auto login account using LSA.


Active Setup:


With ThinKiosk as shell, you can now run Active Setup with ThinKiosk’s improved Active Setup Async.

Active setup Async is a utility we have implemented into ThinKiosk that will perform active setup 60% faster than standard Microsoft active setup via a threading and queuing engine, the end result is active setup support ( for example: HDX flash redirection) with a much faster (and prettier)  interface.


Start up Script:startup sript

ThinKiosk can now implement the local group policy engines start-up script to allow you to manage off domain PC’s. With the start-up script, you can install software, updates, disable services, uninstall software, delete files, profiles… anything!

The only limitation here is your own imagination or scripting abilities.

If the latter is a concern? worry not, we’ll be creating a scripting library where ThinKiosk enthusiasts can share and collaborate on similar tasks.


Local session control:session

ThinKiosk 4.0 offers you the ability to control local volume, printers, screen saver and even background color.


Improved debug logging:debug window

ThinKiosk logs everything, every action, command, hiccup… everything.

If something isn’t quite working as expected, chances are the debugging window will announce in triumphant glory exactly what is broken!


Redundant profile management:

ThinKiosk takes a copy of it’s profile on each check in to an FTP server or Broker server.

In the event of the server being offline ThinKiosk attempts five times to connect before failing back to the local profile allowing your users to continue working without an outage.

If the broker server becomes available again throughout the day, ThinKiosk will check back in to allow management but will not disturb the user.


And so much more!

I’m not going to go on and on, but as you can see… It’s awesome!

Check back in a few weeks for the release as we ready the build.

  1. Giunio Brutus
    May 23, 2013 at 1:44 pm

    Awesome Work Andrew!!!!

  2. Gonjo
    May 23, 2013 at 1:44 pm

    Awesome Work!

  3. May 23, 2013 at 6:16 pm

    Congratulations; nice work!

  4. May 24, 2013 at 5:52 am

    Hi Andrew,

    I can imagine the hours of work you guys must have put in, it looks great. Congratulations!



  5. Foxman
    May 24, 2013 at 10:33 am

    It looks great! Will it still work with all the .NET Framework versions?

    • May 24, 2013 at 10:34 am

      No you’ll need .net 4 sadly.

      • Foxman
        May 24, 2013 at 11:57 am

        Andrew, thanks!

        I want to install ThinKiosk 3.3 on Windows XPe. Have you tested that?

      • May 24, 2013 at 11:58 am

        Should be fine. Lots of people doing it. .Net 4.0 also works fine on xpe.

  6. Foxman
    May 24, 2013 at 12:00 pm

    How did you install .NET Framework 4.0 on Windows XPe. We have HP T5730 clients. With 1 GB. Any tips?

  7. Andrew S
    May 25, 2013 at 12:47 am

    Andrew – What a work of art. It looks fantastic and I cannot tell you how impressive this piece of work is.
    My hat is off to you again.
    Andrew Stuckey

  8. Preston Gallwas
    May 25, 2013 at 6:52 am

    Looks great can’t wait to try it

  9. Tucker Gibson
    May 30, 2013 at 2:36 am

    Looks pretty awesome Andrew. Any word on wireless and WES EWF support (ie persisting user settings)?

  10. June 19, 2013 at 9:49 am

    Great work Andrew and Remko! Can’t wait for the new version to block CTRL+ALT+DELETE in Citrix 🙂

  11. Kane
    June 21, 2013 at 10:59 am

    June 21, First day of summer……

    We wants it, we needs it. Must have the precious!

  12. Joe White
    June 25, 2013 at 12:39 am

    This really is some great work.

  13. lucidrenegade
    June 27, 2013 at 3:30 pm

    Any idea when 4.0 will be available? I’m starting a ThinPC project and think this would be perfect.

    • June 27, 2013 at 11:49 pm

      Hi all,

      Sorry for the delay but we’re very close, just some translating and last minute xendesktop 7 tweaks at present.

      If you want an early copy, drop me an email on

  14. July 1, 2013 at 4:53 pm

    I was check in this kiosk and was wondering if there is a printing ability from this kiosk and how to set it up?

    • July 3, 2013 at 6:05 pm

      Hi Paul,

      Does Ctrl>P work?

      • July 3, 2013 at 6:32 pm

        Thanks for reply!
        No It does not. If I am replacing user shell with thin kiosk non of the short cuts do works. Except ctrl+alt+delete.
        But if I run kiosk with explore.exe Ctrl>P does work but this is not an option for me.
        Thank you

      • July 3, 2013 at 6:37 pm

        Understood, drop me an email with your details and ill spin up a test env.

  15. July 3, 2013 at 6:36 pm

    Sorry I meant explorer.exe shell.

  16. July 11, 2013 at 5:16 pm


    First off, fantastic work with ThinKiosk. We are currently using 3.3 with our VDI-In-A-Box setup in our school and look forward to the new features 4 will bring. I have also started looking into creating a Touch Screen Kiosk for our library which will link to the Library’s system webpage, allowing users to search for book availability for example. The only niggle is the need for an on screen keyboard which either pops up when a text field is selected, or a hide/unhide button on the ThinKiosk UI. Would this be possible or possible worked into future updates, or do you know of any 3rd party apps able to do this in the mean time?

    Kind Regards,

    L Panton
    IT Technician

    • July 11, 2013 at 11:16 pm

      what version of windows locally? windows 7 has a built in keyboard, failing that consider:

      you could map it as a custom tool.

      • August 7, 2013 at 9:32 am

        Hi. Sorry for the late reply. We are using Windows 7 however the Touch Screen software does not register the screen as a touch screen so we were limited to it being seen as a mouse input. We ended up going with Hot Virtual Keyboard (the paid for version) as this suited the setup best.

        With the new interface and the Application non metro icons, would we be able to set URL links on them?

  17. Fraser
    August 7, 2013 at 5:08 pm

    Hi Andrew, I just heard about this at BriForum Chicago last week and it looks awesome! Any timeline on the release of v4.0 or should I just get started with 3.3 for now.

  18. Robert
    August 7, 2013 at 8:15 pm

    I’d like to take a generic Windows 7 laptop and issue it to a user and have them turn it on and have them be able to only connect to our citrix environment. I tested 3.3 and it works as I have just stated. Now I’d like to be able for those users to take the laptop to a hotel, somehow connect to the Hotel’s wifi and then connect to our citrix environment. All with the system locked down so they can’t do anything else on this laptop. Is this a possibility with this or any kiosk type software?

  19. Mark M.
    August 12, 2013 at 7:11 pm

    Hi Andrew, do you have an updated timeline on when 4.0 will be released? Thanks.

    • August 17, 2013 at 7:39 am

      Hi Mark,

      September 2nd

      • September 9, 2013 at 10:36 am

        Do you have a new date set for version 4?

  20. August 13, 2013 at 4:10 pm

    Is there an ETA for version 4.1? We want to use this wifi option also for our laptops but at this time this is not possible.

  21. James D.
    August 17, 2013 at 3:35 pm

    Hi Andrew, will 4.0 include the ctrl + alt + del pass through for Citrix connections? I hope so, because their is currently no other method for our fat clients or thin clients on VIAB.

    • August 17, 2013 at 3:36 pm

      Yes, a 1.0 version of magic filter will be released with 4.0.

  22. Steve O
    September 7, 2013 at 3:11 pm

    Hi Andrew,

    Will 4.0 be available for download soon? Looking foward to trying it out in our vmware view env.


  23. Jakob
    September 9, 2013 at 8:28 am

    Hi Andrew,

    the release should be on September 2nd, is there a new date?


  24. Jason Richardson
    September 9, 2013 at 12:42 pm

    Hi Andrew,

    Is there a ETA for version 4.0?


  25. September 9, 2013 at 1:10 pm

    Sorry for the radio silence all, between losing my cell phone (wordpress notifications) and suffering a delay last week, release was pushed out till September 12th (this Thursday).

    Get in touch if you want an early copy. andrew(at)


  26. Carl L
    September 9, 2013 at 3:11 pm

    Version 3.3 is very good! Can’t wait for Version 4.0.

    3 days left and counting down…

  1. August 10, 2013 at 3:34 pm
  2. October 7, 2014 at 3:30 pm

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

<span>%d</span> bloggers like this: